Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-1834-1)

A buffer overflow vulnerability was discovered in the Broadcom tg3 ethernet driver for the Linux kernel. A local user could exploit this flaw to cause a denial of service crash the system or potentially escalate privileges on the system. CVE-2013-1929 A flaw was discovered in the Linux kernel's...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-1833-1)

Andy Lutomirski discover an error in the Linux kernel's credential handling on unix sockets. A local user could exploit this flaw to gain administrative privileges. CVE-2013-1979 A buffer overflow vulnerability was discovered in the Broadcom tg3 ethernet driver for the Linux kernel. A local user...

Fedora 18 : tomcat-7.0.40-1.fc18 (2013-7993)

Updated to 7.0.40 - Resolves: rhbz 956569 added missing commons-pool link Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1829-1)

Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver. A local user could exploit this flaw to examine some of the kernel's heap memory. CVE-2012-6549 Mathias Krause discovered a flaw in xfrmuser in the Linux kernel. A local attacker with NETADMIN...

Ubuntu 10.04 LTS : linux vulnerabilities (USN-1824-1)

Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver. A local user could exploit this flaw to examine some of the kernel's heap memory. CVE-2012-6549 Mathias Krause discovered a flaw in xfrmuser in the Linux kernel. A local attacker with NETADMIN...

Ubuntu 12.04 LTS / 12.10 / 13.04 : firefox vulnerabilities (USN-1822-1)

Multiple memory safety issues were discovered in Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox...

Ubuntu 12.04 LTS / 12.10 / 13.04 : thunderbird vulnerabilities (USN-1823-1)

Multiple memory safety issues were discovered in Thunderbird. If the user were tricked into opening a specially crafted message with scripting enabled, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of t...

Fedora 18 : phpMyAdmin-3.5.8.1-1.fc18 (2013-6977)

phpMyAdmin 3.5.8.1 2013-04-24 =============================== - security Remote code execution pregreplace, reported by Janek Vind see PMASA-2013-2 - security Locally Saved SQL Dump File Multiple File Extension Remote Code Execution, reported by Janek Vind see PMASA-2013-3 Note that Tenable Netwo...

Fedora 19 : phpMyAdmin-3.5.8.1-1.fc19 (2013-6928)

phpMyAdmin 3.5.8.1 2013-04-24 =============================== - security Remote code execution pregreplace, reported by Janek Vind see PMASA-2013-2 - security Locally Saved SQL Dump File Multiple File Extension Remote Code Execution, reported by Janek Vind see PMASA-2013-3 Note that Tenable Netwo...

Fedora 19 : libtiff-4.0.3-6.fc19 (2013-7339)

Repair minor security issues CVE-2013-1960, CVE-2013-1961 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Microsoft Windows Wireless Network History

Using the supplied credentials, this plugin reports wireless networks that this computer has connected to as well as the settings for Windows Vista and later systems. %NASLMINLEVEL 5200 C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66350; scriptversion"1.8";...

Adobe RoboHelp Server Installed

Adobe RoboHelp Server, used to manage web help systems and knowledge bases, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66315; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06";...

Fedora 17 : telepathy-idle-0.1.15-1.fc17 (2013-6557)

This release validate TLS certificates properly, preventing man-in-the-middle attacks. This will be a regression for users of IRC-over-SSL servers/proxies that do not have a certificate trusted by system-wide CA configuration; they will no longer be able to connect. If someone implements fd.o...

Ubuntu 13.04 : linux vulnerabilities (USN-1815-1)

Andy Lutomirski discover an error in the Linux kernel's credential handling on unix sockets. A local user could exploit this flaw to gain administrative privileges. CVE-2013-1979 Andy Lutomirski discovered a privilege escalation in the Linux kernel's user namespaces. A local user could exploit th...

Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-1812-1)

Mathias Krause discovered an information leak in the Linux kernel's UDF file system implementation. A local user could exploit this flaw to examine some of the kernel's heap memory. CVE-2012-6548 Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver...

Google Apps Directory Sync < 3.1.6 Weak Stored Credential Local Disclosure

The version of Google Apps Directory Sync installed on the remote host is earlier than 3.1.6 and is, therefore, affected by a weak stored credential local disclosure vulnerability. An issue exists in the way 'PBEwithMD5andDES' Java encryption algorithm is implemented, allowing a local attacker to...

Jack Daniel on Beginning His Security Career

Dennis Fisher talks with Jack Daniel of Tenable about his early days as a car guy, his accidental introduction into security and his second life as an amateur blacksmith. Download: 06jackdaniel.mp3 Image via AJolly‘s Flickr photostream, Creative Commons...

Fedora 19 : telepathy-idle-0.1.15-1.fc19 (2013-6591)

This release validate TLS certificates properly, preventing man-in-the-middle attacks. This will be a regression for users of IRC-over-SSL servers/proxies that do not have a certificate trusted by system-wide CA configuration; they will no longer be able to connect. If someone implements fd.o...

Fedora 18 : php-twig-Twig-1.12.3-1.fc18 (2013-6114)

Updated to version 1.12.3 See: http://blog.twig.sensiolabs.org/post/47461911874/security-release-twig -1-12-3-released Full change log: https://github.com/fabpot/Twig/blob/v1.12.3/CHANGELOG Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Puppet REST API Detection

A Puppet REST API web service, used for communication between masters and agents, was detected on the remote host C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66233; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24";...